User Manual

20
If you chose MSCHAPv2 Username and Password from the EAP-FAST
Authentication Method drop-down list and clicked Configure, the Configure
Username and Password window appears. To know more about this option
refer Using PEAP-MSCHAP V2 security.
If you chose TLS Client Certificate from the EAP-FAST Authentication Method
drop-down list and clicked Configure, the Define Certificate window appears.
When configuring EAP-TLS for EAP-FAST, you can check the Authenticate
Server Identity check box to force the system to authenticate the identity of the
server as an added level of security. This option is available only when
configuring EAP-FAST. To know more about this option refer Using EAP-TLS
security.
If you want to force the client adapter to disassociate after you log off so that
another user cannot gain access to the wireless network using your credentials,
check the No Network Connection Unless User is Logged In check box. The
default setting is checked.
Perform one of the following:
If you want to enable automatic PAC provisioning, make sure the Allow
Automatic PAC Provisioning for this Profile check box is checked. A protected
access credentials (PAC) file is obtained automatically as needed (for instance,
when a PAC expires, when the client adapter accesses a different server,
when the EAP-FAST username cannot be matched to a previously provisioned
PAC, etc.). This is the default setting.
If you want to enable manual PAC provisioning, uncheck the Allow Automatic
PAC Provisioning for this Profile check box. This option requires you to choose
a PAC authority or manually import a PAC file.
From the Select one or more PAC Authority to use with this Profile list,
highlight the PAC authorities associated with the network defined by the
profile's SSID. The list contains the names of all the authentication servers
from which you have previously provisioned a PAC.
Click Manage. The Select EAP-FAST PAC window appears.
This window lets you group PAC authorities to facilitate authentication while
roaming. For example, if there are three PAC authorities at a certain site
covering different areas of the site, you can create a group containing these
authorities and select one of them in the PAC list. In this way, if you're roaming